[TEST/REVIEW] Netflow implementation

[Julian Elischer]

Gleb Smirnoff wrote:

>On Wed, Sep 08, 2004 at 10:43:34AM +0000, Patrick.Guelat at imp.ch wrote:
>P> > here is netgraph module which implements Netflow traffic
>P> >accounting, which I'm going to add to CURRENT in recent future:
>P> >[..]
>P> >I've been testing it for last week on loaded 100Mbit Ethernet
>P> >which serves 9 ASes, 12 prefixes :) And it works stable.
>P> 
>P> Did some tests here, looks very nice ! At least our netflow-collector
>P> is happy with the data ;-)
>
>The only empty fields are ASNs :) I hope to fill them in future.
>
>P> flowctl did not work for me, to which
>P> node do you have to send the msg to ?
>
>I usually call node "netflow" using 'ngctl name', and then call
>'flowctl netflow show'.
>
>P> I attached two netflow nodes on a tee, one right2left and one left2right
>P> to catch both directions.
>
>This is working solution, but not correct. :)
>To catch both directions you should feed ng_netflow with incoming traffic
>from all interfaces.
>

using 'tee' means you are duplicating all packets.
shouldn't you do collection "inline? or does this NEED to have copies of 
the packets?

>
>  
>